WF permissions and roles (3) A simple permission Architecture

Workflow Permissions

Name	Description
Permission type	See table

(Code table)

Name	Description
Workflow template Management	Add, enable, and disable workflow templates. Specify the [workflow template design] operator for the template.
Workflow template design	Design a workflow template, design the process node attributes, specify the process permissions, and specify the node permissions.
Workflow node design	Design the process node attributes of a workflow template and specify the node permissions.
Instance startup	Start a workflow instance based on a workflow Template
Instance running	Run a started workflow instance
Node operation	Nodes that run a started workflow instance
Terminate an instance	Terminate a started workflow instance
View instances	View a running workflow instance
View Template	View all instances based on a template
View nodes	View a node of a running workflow instance
View template nodes	View a node of all instances based on a template
View status	View the running status of a running workflow instance (only running status, not detailed information)
Instance Modification	Modifies the completed node of a running workflow instance.
Instance path modification	Modifies the node or path of the unfinished part of a running workflow instance.

 

Work domain

Name	Description
Department name
Department name	Can be managed by higher-level departments
Subordinate Department name	Management of lower-level departments
Superior relationship Department name S	Multiple permissions, which can be granted by the department or granted to the other party
Subordinate Department name S	Multiple permissions, which can be granted by the department or granted to the other party
Peer Department name S	Multiple permissions, which can be granted by the department or granted to the other party

 

Dynamic work domain

Name	Description
Start a work domain	If the process or node permission is set to [start a workflow], the process instance or node belongs to the work domain of the person who starts the workflow.
Initiator	If the process or node permission is set to [initiator], the process instance or node belongs to the person who started the process.
Specify the front Node	If the process or node permission is set to [specified by the previous node], the permissions of the Process instance or node can be specified by the former node operator.

 

Authority

Name	Description
Title	Such as managers, section chiefs, and employees
Default role Permissions

 

User table

Name	Description
User Name
Department

 

Workflow role

Name	Description
Role name
Permission S	Permissions in workflow Permissions

 

Workflow template permission

Name	Description
Template Name
Node list	Multiple
Work domain S	Department name in the work domain table. And [specify the start, start, and front node of the Work domain]
Bind a role

 

Workflow template node Permissions

Name	Description
Template Name
End name
Upper node S	Multiple
Lower-level node S	Multiple
Work domain S	Department name in the work domain table. And [specify the start, start, and front node of the Work domain] (Empty is an inherited workflow template)
Bind a role	(Empty is an inherited workflow template)

The following section describes the logical relationship.